CVE-2019-12240: Virim Project Virim

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php.

Affected products

• Virim Project Virim: version 0.4 only

Published 2019-05-20. Last modified 2026-06-17.